The call is coming from inside the house, though. The problem here is largely one of perverse incentives. The fact that Microsoft and Google both offer web brow

The call is coming from inside the house, though. The problem here is largely one of perverse incentives. The fact that Microsoft and Google both offer web browsers AND benefit from spying on people USING web browsers means that I automatically distrust 100% of whatever they're trying to do with browsers and/or web standards. I feel like the real solution here is simply to pop up a big scary warning whenever you try to install an extension that says: "Hey, this extension will be able to read and/or modify your internet traffic. It could steal your bank account information. Are you really sure you trust the developer of this thing that much?". Or, you could make two tiers of extensions, where one tier is the "harmless" tier that can't actually do anything with requests and responses or modify the DOM, and the other is the "advanced" tier that displays the big scary warning above. But, honestly, that should be about it. There are a few things we need to remember for some context, IMO: * 99% (made up number) of web users don't install extensions, anyway. This is more true the less savvy the person is. * A web browser isn't going to stop the user from downloading virus.exe or from installing SpyBrowserMaxx.app on their computers, so how much effort is really reasonable to try to prevent users from installing bad extensions? * Hindering good extensions, like uBlockOrigin, actively HARMS the privacy and security of browser users. Let's not be tricked into giving up our own ability to fight against tracking and spying for the mythical Grandma who installs browser extensions from sketchy side-channels (is that even possible anymore in either Chrome or Firefox?).